Prove installed local-wheel replacement and state retention (#186) #232
No reviewers
Labels
No labels
accessibility
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
P1
P2
P3
question
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Creatidy/scarcity-router!232
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "issue-186-installed-lifecycle"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Refs #186. Remaining independently executable installed-lifecycle proof after accepted GHCR PR231; not full186 closure or an old-release/Windows/publication claim. Basee34a8880b01695baef14579c71dd740a25c32e39, HEAD67428af (full exact refs in review record).
Changes: extend the SAME make package-check entrypoint with fresh local-wheel install -> existing4 installed smokes -> seed schema-valid synthetic user policy and ServerConfiguration record using installed APIs/defaultpaths -> uv tool install --force of EXACT SAME current wheel -> rerun installed smokes and verify retained state -> uv tool uninstall of ONLY throwaway tool -> verify4 entrypoints/toolenv removed while policy bytes/closedSQLitebytes/logical record survive. Synthetic HOME/tool dirs cleaned at end; no realoperatorstate/credentials/provider calls. Build/install subprocesses now use deliberate PATH/HOME/optionaloperationalUVcache allowlist, not ambient os.environ. ResolvedPath containment rejects prefix-lookalike HOME escapes. No runtime product/security/publiccontract/dependency change; existing packaged defaults/version authority preserved.
Evidence:10 deterministic lifecycle/environment/failure tests with simulateduv but real embedded seed/retention logic; failedreplacement/missingentrypoint/stateoverwrite/uninstallfailure/statepurge/pathescape refusal. Existing packaging16tests staygreen (26focused). Actual final package-check independently exercised real uv install/force-reinstall/uninstall using locally built wheel and installed interpreter (-I), both MCP/REST/CLI/default-resource rounds, plus retained synthetic state. No repository-relative imports claimed in installed proof (unit fakes explicitly use checkout interpreter).
Full gate env-i/synthetic HOME: uv sync --only-dev; make check3123 tests OK/18skips(701.951s); repo-managedbasedpyright0/0/0 plus explicit changedtool/testtypecheck0/0/0; make package-checkallpassed; source/stagedwhitespaceclean. Expected synthetic diagnostic fixture output remains, no live provider. No release/tag/deploy/registry/workflow/signing/main action.
Boundaries/docs: SAME-VERSION wheel replacement/reinstall only; no old->new cross-version release, Windows runner/service/globaltrust/signature/publication proof. Retention covers2 seeded records, not arbitraryuserstate. #185 owns separate version/schema migrations; #224 transport/TLS and #227 downstreamcomposedacceptance unchanged. #186 staysopen. Review history preserved:186 invocation1 APPROVE on PR231; imminent fresh whole-PR native review invocation2/10 for this new4-file delta, not re-review of accepted unchanged GHCR code.
Imminent fresh whole-PR native independent review ordinal2/10 for issue186 (ordinal1 APPROVE/PR231 consumed and integrated; no reset/review of unchanged accepted GHCRcode). Frozen HEAD67428afb55b65552678bc5f9a29f36517f4e0bd1/base=merge-basee34a8880b01695baef14579c71dd740a25c32e39. Resolved reviewerGLM-5.3/zai-coding-plan, pr-reviewer read-only role. Scope4files only, correctness/security/UX and honest extent of installed-lifecycle evidence. Gateobserved:3123OK/18skips701.951s,basedpyright0/0/0,actualpackagecheckallpassed,bothwhitespacechecks; primarycompletecompactdelta/identity/refs/cleantreeverified. No writes/switches/pushes during review. No model/script/Task review substitution or separate reviewer infrastructure.
Actual fresh native independent reviewer exists: ses_e7ce3a7aeffeME2poEXRM9MUs4 (overviewbusy), requestam-1793201035306-jigosn, resolvedGLM-5.3/zai-coding-plan, read-onlypr-reviewer. Issue186 invocation2/10, exactfrozenHEAD67428afb55b65552678bc5f9a29f36517f4e0bd1/base=merge-basee34a8880b01695baef14579c71dd740a25c32e39. Whole4-file correctness/security/UX review; no separateworktree, Taskreview or ownerrelay. Source remains frozen while active.
Issue186 invocation2/10 final native independent GLM-5.3 review ses_e7ce3a7aeffeME2poEXRM9MUs4: APPROVE/findings[]/UX:none. ExactHEAD67428afb55b65552678bc5f9a29f36517f4e0bd1/base=merge-basee34a8880b01695baef14579c71dd740a25c32e39. Complete4-file delta/allseed-retention APIs/entrypoint/defaultpaths/envallowlist/negativeproof/docs checked against canonicalexplicitHEAD and frozenlocalcontext; no materialsource/scopeuncertainty. Reviewer shell denied by role; primary observed actual sanitized3123OK/18skips701.951s,basedpyright0/0/0,realpackagecheckallpass and verifies actual Gitobjects/clean/currentness separately. FreshGit/canonicalmetadata unchanged; merge-tree9804a5f063b7b6f4ffa68e5ab918d03d8f9b25a3 equals reviewedHEADtree. No sourcechange/re-reviewofacceptedGHCR; retain186history1/2 acrossphases. Proceed authorized merge todevelop only; full186/platformgates remainopen, no release/deploy/signing/liveprovider.